Security
How Fabrica treats your system and data, and who is responsible for it. These principles apply from the first assessment, and the specific controls are agreed with your technical team before any access is granted.
Fabrica is a brand of Thinslices. Thinslices provides the service, is the company your agreement is with, and is responsible for how your system and data are handled.
No access to your systems is needed for the first call. When an assessment starts, observation and analysis use read-only access, agreed with your engineers before it is granted.
Sensitive payloads are redacted before analysis. Collection runs off the request path, so a collection failure can't affect your customers.
Rebuilt code lives in your repository and runs on infrastructure you choose. Changes arrive as reviewed pull requests, and your engineers approve plans, merges, configuration and budget. Agent actions are recorded against each work item.
Traffic moves to the rebuilt system in steps, such as 1%, 10%, 50% and 100%, with acceptance criteria for each step. Rollback is a routing change and is tested before go-live, and every transition is logged. Data cutover is planned as a separate workstream.
For a security questionnaire, or details of the controls that would apply to your system, ask on your first call or reply to any email from us.
How we handle the details you share through this website is covered in the Privacy notice